Patchwork, an Indian state-sponsored threat actor, used social engineering and spear-phishing lures to target military personnel and activists in Bangladesh, China, India, Pakistan, Sri Lanka, and Tibet.